58f58350ed0987b8d8db6a1770cb7c3519e2fa1b80c81d33de75bcaccb3b1552

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
08/05/2024, 13:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

c03105be4a46b7c83f84330673ddd520_NEIKI.exe
Size

3.6MB
MD5

c03105be4a46b7c83f84330673ddd520
SHA1

2a9f9dc9aecca00597774ea81bdc04b1c235c44f
SHA256

58f58350ed0987b8d8db6a1770cb7c3519e2fa1b80c81d33de75bcaccb3b1552
SHA512

d7218c085999d37da966ef391b9809b762bdce198dd7f15cb150b7dfc113fae6d8e743d1b0857dffd5622d694dfcec7922f26580e34d2079b72cf54817484b46
SSDEEP

98304:TudjTgn4hEkeriAhSBeDaO+jt/jao2nc7V1Ny8J9Gd:c84YiA0BwaO+jmojy8y

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	c03105be4a46b7c83f84330673ddd520_NEIKI.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1760	c03105be4a46b7c83f84330673ddd520_NEIKI.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1760	c03105be4a46b7c83f84330673ddd520_NEIKI.exe
1760	c03105be4a46b7c83f84330673ddd520_NEIKI.exe

C:\Users\Admin\AppData\Local\Temp\c03105be4a46b7c83f84330673ddd520_NEIKI.exe
"C:\Users\Admin\AppData\Local\Temp\c03105be4a46b7c83f84330673ddd520_NEIKI.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1760

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads